Topic: [Resolved] Remove RSS Feeds

[Resolved] Remove RSS Feeds

@onesheep

Participant

10 years, 8 months ago

I’ve been through and tried all the other forum posts on this,(such as this one) but none of them work for Buddypress 2.0.1 on WordPress 3.9.

Whatever I try I can still access http://www.mysite.com/activity/feed from any browser and without logging in.

So, how do I remove and kill off the rss feeds that make BuddyPress insecure?

New to buddyPress so any help much appreciated! Thanks.

Viewing 7 replies - 1 through 7 (of 7 total)

@onesheep

Participant

10 years, 8 months ago

So this plugin seems to do the trick.

https://wordpress.org/plugins/private-community-for-bp-lite/

@ubernaut

Participant

10 years, 8 months ago

just curious how exactly you feel that rss feeds make buddypress “insecure”

@henrywright

Moderator

10 years, 8 months ago

@ubernaut perhaps there’s a privacy concern if their site is a closed community? I’ve also heard how some people choose to disable RSS feeds because it is an easy way for sites to scrape their content.

@ubernaut

Participant

10 years, 8 months ago

yeah well i guess that makes some kind of sense but I’m not sure i agree with the basic logic of it anyway thanks for sharing that.

🙂

@onesheep

Participant

10 years, 7 months ago

So just to follow up on this. The site needs to be totally private, especially the discussions that happen using BuddyPress – nothing should be available outside of a login.

RSS is publicly exposed and therefore breaks this, all you need to do is know the simple url …/feed and you get access to everything, bot or human. That is quite a security flaw for private conversations.

So this plugin turns that off and gives anyone not logged in a 404 or any redirect you want.

@ubernaut

Participant

10 years, 7 months ago

sorry maybe this is a dumb question but can you even turn off the regular wordpress rss feed? i’d think both feeds basically work the same way maybe @r-a-y can shed some light?

@aces

Participant

10 years, 7 months ago

@ubernaut @onesheep

http://wordpress.stackexchange.com/questions/33072/how-to-remove-feeds-from-wordpress-totally ?

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘[Resolved] Remove RSS Feeds’ is closed to new replies.

BuddyPress.org

[Resolved] Remove RSS Feeds

Topic Info

Topic Tags

BuddyPress.org

[Resolved] Remove RSS Feeds

Topic Info

Topic Tags

Reply Search